Entra Id

2 CVEs product

Monthly

CVE-2026-24305 CRITICAL Act Now

Azure Entra ID (formerly Azure AD) has an elevation of privilege vulnerability allowing attackers to escalate permissions within the identity platform.

Azure Entra Id
NVD
CVSS 3.1
9.3
EPSS
0.1%
CVE-2025-55241 CRITICAL This Week

Azure Entra ID Elevation of Privilege Vulnerability. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Entra Id
NVD
CVSS 3.1
10.0
EPSS
0.1%
CVE-2026-24305
EPSS 0% CVSS 9.3
CRITICAL Act Now

Azure Entra ID (formerly Azure AD) has an elevation of privilege vulnerability allowing attackers to escalate permissions within the identity platform.

Azure Entra Id
NVD
CVE-2025-55241
EPSS 0% CVSS 10.0
CRITICAL This Week

Azure Entra ID Elevation of Privilege Vulnerability. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Entra Id
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy